critical9.8
CVE-2024-3777
The password reset feature of Ai3 QbiBot lacks proper access control, allowing unauthenticated remote attackers to reset any user's password.
Impact
The password reset feature of Ai3 QbiBot lacks proper access control, allowing unauthenticated remote attackers to reset any user's password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ai3 | Qbibot | All versions |